open source tripwire ... is it still alive?

cygnus-x1 · 08-11-2006, 10:17 AM

I wne to the sourceforge page and the last comment was made on 12-01-2005. Thats not too far off but I did not see anything else. I went to the commercial site but could not find links to download the open source version from there so I could not tell if it was being hosted and maintained elsewhere. Does anyone know if it is still being maintained and if it will continue? We would like to try it for the first time.

thanks

Doug

unSpawn · 08-11-2006, 10:34 AM

You don't want tripwire
I don't want tripwire...
You want Aide (passive), or
I want Aide
Samhain (active).
or Samhain.

cygnus-x1 · 08-11-2006, 11:03 AM

Could you please elaborate as to why?

unSpawn · 08-12-2006, 05:05 AM

Could you please elaborate as to why?
Sure. Should have done that in the first place. tripwire is abandoned, unsupported code as you've seen yourself. Aide does everything tripwire does but is much easier configurable, fast, very actively maintained and supported by a rather large user community. Aide however does not run continuously, needs an extra tool to cope with "one to many" setups (central integrity host) and only checks file integrity. If you need those features and more then Samhain would be a good choice.

cygnus-x1 · 08-12-2006, 10:33 AM

Thanks for the info. I really like what I see in SamHain. I will investigate both.

Doug